Privacy policy

This policy explains what Diagnox does with information about you. It covers this website, the Urinox and Ketonox apps, and what happens when you email us.
We’re Diagnox LLC, a Texas company doing business as Diagnox Health, at 7250 Dallas Parkway, Suite 400, Plano, TX 75024.
If you bought a Diagnox product at Walmart, on Amazon, or from another retailer, that retailer handled your information for that purchase, under their policy rather than ours.
How to read this page. Each section opens with a short summary in italics. The summaries are there to make this readable. They are not the policy. If a summary and the detail below it ever disagree, the detail governs.

We don’t sell your personal information. We never have.
We don’t send health-revealing data to advertising platforms. Our advertising tools receive that a purchase happened and what it was worth. They don’t receive which test you bought or which pages you looked at.
We don’t build profiles about your health, and we don’t use anything you tell us about your health to target advertising at you.
We don’t keep test photos. If you email us a picture of a test, we answer you and delete the message after 90 days.

1. What we collect

In short: What you give us when you buy, sign up, write to us, or use an app. Plus the usual technical information every website receives.
1.1 When you visit the site. Your IP address, device and browser type, the pages you visit, how you arrived, and how you move around. This arrives automatically. Section 8 covers the cookies and similar technologies involved.
1.2 When you buy something. Your name, email address, shipping and billing address, phone number if you give one, what you ordered, and your payment details. Payment card numbers go directly to our payment processors. We never see or store them.
1.3 When you create an account. Your name, email, password, addresses and order history. Your Diagnox account does not store test results. If that changes, we’ll update this policy before the feature exists, not after.
1.4 When you write to us. Whatever you put in your message, including any photograph you send. If you send us a picture of a completed test so we can help you read it, that photograph is health information about you, and Section 2 explains how we treat it.
1.5 When you use our apps. Urinox and Ketonox ask you to register with your name, email, and optionally your gender and year of birth. Inside the app you can enter urinalysis values, and optionally your weight, height, BMI, medical conditions, eating habits and alcohol consumption. All of that is optional except registration, and all of it is health information.
1.6 When you leave a review. Your name or the initials you choose, your rating and what you write, and any photograph you attach. Reviews are public. Section 3 explains why we ask you not to put medical details in one.
1.7 When you sign up for email. Your email address, and whether you opened or clicked. We don’t run a text message program.

2. Health information, and how we treat it differently

In short: Health information gets tighter handling than anything else we hold. It never goes to advertisers, it’s never used for targeting, and the photos get deleted.
2.1 What counts. Test results you enter in an app. Photographs of tests you send us. What you tell us about your health in an email. And, because of what we sell, the fact that you bought or looked at a particular test. A pregnancy test purchase says something about you, and we treat it that way even though it’s just a transaction record.
2.2 It never goes to advertising platforms. Our advertising and analytics tools receive that a purchase happened and what it was worth. They don’t receive the product name or identifier for any test relating to urinary, vaginal, reproductive, hormonal, prostate or sexual health, and they don’t receive browsing data on those pages.
2.3 It’s never used for targeting. We don’t build audiences from it, we don’t segment our email list by health topic, and we don’t run browse-abandonment messages on those categories.
2.4 Photographs are deleted after 90 days. We read them, answer you, and they go. We don’t attach them to your customer record, we don’t save them anywhere else, and we don’t use them for anything except replying to you.
2.5 App health data stays in the app. It isn’t combined with your order history, it isn’t shared with advertisers, and it isn’t sold or licensed to anyone, in identifiable form or in aggregate.

3. Why we use your information

In short: To sell you things, ship them, answer you, keep the site working, and send you email if you asked for it.
To fulfill your order. Processing payment, shipping, sending confirmations, handling returns.
To answer you. Support, including reading test photos.
To run and improve the site and apps. Making sure things load, finding what’s broken, understanding which pages people use.
To send you email you asked for. Only with your consent, and you can withdraw it in any message.
To keep things safe. Detecting fraud, preventing abuse, securing accounts.
To meet legal obligations. Tax records, accounting, product safety, and responding to lawful requests.
One thing we ask of you. Please don’t put detailed medical information in a public review. It stays public, search engines index it, and we can’t remove it from everywhere once it’s out. Email us instead and we’ll talk about it privately.

4. Who we share it with

In short: The companies that make the business run. Named, so you can look them up.
We don’t sell your personal information, and we don’t share it with anyone except the companies below and where the law requires it.

We also share information when the law requires it, in response to a lawful request, to protect our rights or someone’s safety, or if the business is sold, in which case the buyer is bound by this policy for information collected under it.

5. Advertising and analytics

In short: We advertise, and our tools measure whether it works. What they don’t get is anything revealing about your health.
We use Meta, Google, TikTok, Pinterest and Klaviyo to run and measure advertising, and Google Analytics to understand how the site is used.
What these tools receive: that a visit, a cart addition or a purchase happened, the order value, and technical information about your device.
What they don’t receive: the name or identifier of any test relating to urinary, vaginal, reproductive, hormonal, prostate or sexual health. Browsing data on those product pages. Anything you’ve entered in an app. Anything from an email you sent us.
What that means in practice. Under California law, sharing information for cross-context behavioral advertising counts as sharing even when no money changes hands. We do that within the limits above, and you can opt out at any time through Privacy Choices.
We honor Global Privacy Control. If your browser sends that signal, we treat it as an opt-out without you having to do anything else.

6. What we don’t do

In short: The list is short and we mean all of it.
We don’t sell your personal information.
We don’t send health-revealing data to advertising platforms.
We don’t use health information to target advertising or to segment our email list.
We don’t sell, license or commercialize health data, identifiable or aggregated.
We don’t make automated decisions about you that have legal or similarly significant effects.
We don’t buy marketing lists or append data about you from outside sources.

7. How long we keep things

In short: Only as long as there’s a reason. Here are the reasons.

8. Cookies and similar technologies

In short: Some are needed to run the site. The rest you choose.
Cookies are small files a site puts on your device. We use ones that are necessary for the store to work, ones that tell us how the site is used, and ones connected to advertising.
If you’re in the UK or EU, we ask before setting anything beyond the necessary ones, and nothing loads until you choose. If you’re elsewhere, you can change your choices at any time through Privacy Choices.
You can also block or delete cookies in your browser. Some parts of the site won’t work properly if you block the necessary ones.

9. How we protect your information

In short: Encryption, limited access, and honesty about the limits.
Information is encrypted in transit and at rest. Access is limited to people who need it to do their job. Accounts with access to customer data require two-factor authentication.
We can’t promise absolute security, and nobody honestly can. What we can promise is that we don’t hold more than we need, and we delete things on a schedule rather than keeping them forever.
If something goes wrong, we’ll tell you. If health information is exposed, we’ll notify you individually and notify the Federal Trade Commission, as the Health Breach Notification Rule requires. We won’t wait for someone else to find out first.

10. Your choices

In short: You can see it, correct it, delete it, or tell us to stop, wherever you live.
Email. Unsubscribe in any message, or write to us.
Advertising. Opt out through Privacy Choices, or send a Global Privacy Control signal.
Your account. Update it yourself, or ask us to close it.
App data. Delete individual entries or your whole account from inside the app.
Everything else. Email us and ask. We’ll do it, whether or not the law where you live requires us to.
The sections below set out specific legal rights, but this one is the real answer. Ask, and we’ll do it.

11. If you live in California

In short: You have specific rights and here’s how to use them.
You can ask what we’ve collected about you and where it came from, ask for a copy, ask us to correct it, and ask us to delete it. You can opt out of sharing for advertising. We won’t treat you differently for asking.
We collect the categories described in Section 1. We share information for cross-context behavioral advertising as described in Section 5, within the health limits set out in Section 2. We don’t sell personal information.
Health information is sensitive personal information under California law. We use it only to provide what you asked for, never to infer characteristics about you, which means we’re not required to offer a separate limit-the-use option. If that ever changes, this page changes with it.
To exercise any of this, email contact@diagnoxhealth.com or use Privacy Choices. We may need to verify who you are. An authorized agent can act for you with written permission.
California residents can also request a list of any personal information disclosed for third-party direct marketing. We don’t do that, so the answer is nothing.

12. If you live in another US state with a privacy law

In short: The same rights, whichever state.
Many states now have privacy laws with broadly similar rights: to know, to access, to correct, to delete, to take a copy elsewhere, and to opt out of targeted advertising and sale. Some require your consent before sensitive data is processed.
Rather than list every state, we apply these rights to everyone in the United States. Email contact@diagnoxhealth.com and tell us what you want. If we decline, you can ask us to reconsider, and your state’s attorney general can hear complaints.
Health information receives the treatment in Section 2 regardless of where you live.

13. If you live in Washington or Nevada

In short: You have a separate policy, and here’s the link.
Washington’s My Health My Data Act and Nevada’s health data law give you specific rights over consumer health data. Those rights are set out in our Consumer Health Data Privacy Policy, which is a separate document.

14. If you live in the UK or EU

In short: GDPR rights in full, plus the legal bases we rely on.
Your rights. Access, correction, erasure, restriction, portability, objection, and withdrawal of consent at any time. You can also complain to your data protection authority, and in the UK to the Information Commissioner’s Office.
Our legal bases.

Health data is special category data under Article 9. We rely on your explicit consent, which you give by choosing to send us a photo or enter data in an app, and which you can withdraw at any time by asking us to delete it.
Where your data goes. We’re in the United States, so your information is transferred there. Amazon Web Services and Google are certified under the EU-US Data Privacy Framework. Where a transfer isn’t covered by that, we use Standard Contractual Clauses.
Our representatives. EU:  UK: 

15. Children

In short: We’re not for under 18s.
Diagnox is intended for adults. You must be 18 or older to buy from us, create an account, or use our apps. We don’t knowingly collect information from anyone under 18. If you believe a child has given us information, email contact@diagnoxhealth.com and we’ll delete it.

16. Changes to this policy

In short: Dated, logged, and we tell you if it matters.
We update this policy when our practices change. The date at the top changes, and the change log at the bottom says what moved. If a change materially affects how we handle your information, we’ll tell you by email or on the site before it takes effect.
We update this policy before a new feature ships, not after.

17. How to reach us

In short: Email us. A person answers.
Diagnox LLC (d/b/a Diagnox Health) 7250 Dallas Parkway, Suite 400 Plano, TX 75024 United States
Privacy questions, requests and complaints: contact@diagnoxhealth.com
If you’re not happy with how we’ve handled something, tell us and we’ll look at it again. If you’re still not happy, you can complain to your state attorney general, or to your data protection authority in the UK or EU.